feat: ignore scripts for all ci installs

npm · Mar 23, 2022 · 7fd02e2 · 7fd02e2
1 parent 416aa0d
commit 7fd02e2
Show file tree

Hide file tree

Showing 6 changed files with 10 additions and 10 deletions.
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
@@ -3,7 +3,7 @@
 name: Audit
 
 on:
-  workflow_dispatch: null
+  workflow_dispatch:
   schedule:
     # "At 01:00 on Monday" https://crontab.guru/#0_1_*_*_1
     - cron: "0 1 * * 1"
@@ -23,5 +23,5 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --package-lock
+      - run: npm i --ignore-scripts --package-lock
       - run: npm audit
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -3,7 +3,7 @@
 name: CI
 
 on:
-  workflow_dispatch: null
+  workflow_dispatch:
   pull_request:
     branches:
       - '*'
@@ -30,7 +30,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i
+      - run: npm i --ignore-scripts
       - run: npm run lint
 
   test:
@@ -82,5 +82,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i
+      - run: npm i --ignore-scripts
       - run: npm test --ignore-scripts
diff --git a/.github/workflows/post-dependabot.yml b/.github/workflows/post-dependabot.yml
@@ -36,7 +36,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           gh pr checkout ${{ github.event.pull_request.number }}
-          npm install --no-scripts
+          npm install --ignore-scripts
           npm run template-oss-apply
           git add .
           git commit -am "chore: postinstall for dependabot template-oss PR"

diff --git a/lib/content/audit.yml b/lib/content/audit.yml
@@ -12,5 +12,5 @@ jobs:
     steps:
       {{> setupGit}}
       {{> setupNode}}
-      - run: npm i --package-lock
+      - run: npm i --ignore-scripts --package-lock
       - run: npm audit
diff --git a/lib/content/ci.yml b/lib/content/ci.yml
@@ -28,7 +28,7 @@ jobs:
     steps:
       {{> setupGit}}
       {{> setupNode}}
-      - run: npm i
+      - run: npm i --ignore-scripts
       - run: npm run lint {{~#if isWorkspace}} -w {{pkgName}}{{/if}}
 
   test:
@@ -55,5 +55,5 @@ jobs:
     steps:
       {{> setupGit}}
       {{> setupNode useMatrix=true}}
-      - run: npm i
+      - run: npm i --ignore-scripts
       - run: npm test --ignore-scripts {{~#if isWorkspace}} -w {{pkgName}}{{/if}}
diff --git a/lib/content/post-dependabot.yml b/lib/content/post-dependabot.yml
@@ -26,7 +26,7 @@ jobs:
           GITHUB_TOKEN: $\{{ secrets.GITHUB_TOKEN }}
         run: |
           gh pr checkout $\{{ github.event.pull_request.number }}
-          npm install --no-scripts
+          npm install --ignore-scripts
           npm run template-oss-apply
           git add .
           git commit -am "chore: postinstall for dependabot template-oss PR"